CVE-2024-0243 is a high-severity vulnerability affecting the LangChain library, specifically its RecursiveUrlLoader component. It allows an attacker to bypass the intended domain restriction, causing the crawler to download malicious content from external, untrusted domains even when prevent_outside is set to True. This could lead to severe impacts including data compromise, integrity violations, and denial of service. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.1.0CPE matchmatch criteria | cpe:2.3:a:langchain:langchain:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.